Drupal · Drupal Cookies Consent Management · CVE-2025-48915
**Name of the Vulnerable Software and Affected Versions**
Drupal COOKiES Consent Management versions 0.0.0 through 1.2.14
**Description**
The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), in Drupal COOKiES Consent Management. This allows for Cross-Site Scripting (XSS) attacks.
**Recommendations**
For versions 0.0.0 through 1.2.14, update to version 1.2.15 or later to resolve the issue.